redline | 22a42f72a83cdd97c47fffe53311a9dd7acb213acb809e1106f6f1ebae37cf47 | Triage

Submit
Reports

Overview

overview

Static

static

22a42f72a8...47.exe

windows7-x64

1

22a42f72a8...47.exe

windows10-2004-x64

5

Sharing

General

Target

22a42f72a83cdd97c47fffe53311a9dd7acb213acb809e1106f6f1ebae37cf47
Size

172KB
Sample

240525-x9f87sga36
MD5

542728b0adfdcd5734bdcb99a2f605cf
SHA1

29c57a009b0af644a059644fc08c13e770f14bbf
SHA256

22a42f72a83cdd97c47fffe53311a9dd7acb213acb809e1106f6f1ebae37cf47
SHA512

046b50fd457f98999a5dff716abfd5f6871083a74dcf667b370ed6fdcdd9f7a7bd0ab6f3ac671ef0c13bca8a21a32a843c703d58adbdad1fbf1e8a63294a5f24
SSDEEP

3072:FqaJm74qpXtmOnJjBawT253uaxfKfVvXgDOL3DhpPL0F0JCb3O3Cb3hRsRQEcC8X:1sfHvcyh

Score

10^/10

redline microsoft phishing

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

22a42f72a83cdd97c47fffe53311a9dd7acb213acb809e1106f6f1ebae37cf47.exe

Resource

win7-20240220-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

22a42f72a83cdd97c47fffe53311a9dd7acb213acb809e1106f6f1ebae37cf47.exe

Resource

win10v2004-20240508-en

microsoft phishing

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Extracted

Family

redline

C2

45.15.157.131:36457

Attributes

auth_value
e7bf901b8e6b088c010d95efb1cecee1

Targets

- Target
  
  22a42f72a83cdd97c47fffe53311a9dd7acb213acb809e1106f6f1ebae37cf47
- Size
  
  172KB
- MD5
  
  542728b0adfdcd5734bdcb99a2f605cf
- SHA1
  
  29c57a009b0af644a059644fc08c13e770f14bbf
- SHA256
  
  22a42f72a83cdd97c47fffe53311a9dd7acb213acb809e1106f6f1ebae37cf47
- SHA512
  
  046b50fd457f98999a5dff716abfd5f6871083a74dcf667b370ed6fdcdd9f7a7bd0ab6f3ac671ef0c13bca8a21a32a843c703d58adbdad1fbf1e8a63294a5f24
- SSDEEP
  
  3072:FqaJm74qpXtmOnJjBawT253uaxfKfVvXgDOL3DhpPL0F0JCb3O3Cb3hRsRQEcC8X:1sfHvcyh
Score

5^/10

microsoft phishing
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftphishing

© 2018-2024

Terms | Privacy